CVE-2022-45449: 
Acronis Cyber Protect vulnerability analysis and mitigation

Sensitive information disclosure vulnerability (CVE-2022-45449) affects Acronis Agent in Acronis Cyber Protect 15 for Windows and Linux before build 30984. The vulnerability is due to excessive privileges assigned to Acronis Agent, which could lead to unauthorized access to sensitive information (Acronis Advisory).

The vulnerability has been assigned a CVSS v3.0 base score of 7.7 (High severity) with the vector string CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. The vulnerability is categorized under CWE-200 (Information Exposure) and affects the privilege management system of the Acronis Agent component (Acronis Advisory).

The vulnerability allows unauthorized disclosure of sensitive information due to excessive privileges being assigned to the Acronis Agent. This could potentially expose confidential data to unauthorized parties (Acronis Advisory).

The vulnerability has been fixed in Acronis Cyber Protect 15 build 30984 and later versions. Users are advised to update their installations to the latest version to address this security issue (Acronis Advisory).